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If "an order is an order," and we can predict with 10C£S 

confidence that "if.Lemay said it, they'll do it," then we need have no worries 
about the fail-safe system; the positive control instructions are perfectly 
explicit that, "'no order to go ahead* means, 'you are ordered to come back. 1 ” 

But if we imagine that virtually any order might be disobeyed under certain 
circumstances, we might be curious—with an order as important as this one—as to 
what those circumstances might look likes (and.how likely, they seem to be). 

disobedience might arise from laziness, cowardiee, or personal 
goals; I w ill ignore these possibilities. Among elite troops (like SAC pilots) 
a more significant pressure to "disobey" might arise when it appeared necessa ry 
to break the letter of one order ±3 to carry out the "real” wishes of their 
superiors. * (. to. the SAC piloi d 

If "no go-ahead co mmand " were a totally unambiguous signsJL/ox ±s±s the cesires 
of hi 3 Traraarewiw* superior officers (i.e., "come back"), this sort cf pressure to 
disobey his positive control orders would not even arise® But when There is "noise" 
in the communication system, there is a possibility that this "signal" (x.e., lack 
of go—ahead command) might not reflect, the current wishes of his co mman ders; they 
might have ordered him. to go ahead, but their signal failed to get tnrougn. 

Thus, a possible consequence of his obeying the order would oe, "C omin g cack 
when they really wanted me to go ahead." A good pilot is inevitably going to^regard 
this as a costly error (even if he does regard the alternate possml 3 -—going 

ahead when they wanted Mm to cone back—as just as costly, or as very much more 
costly). But so long as he regards it as having low probability , tne Tnougaw Trill 
not put a heavy strain on his willingness to obey his positive control instructions. 
He will regard it as having low probability, for example, if he estimates that: 



-though not 0—if only 
- But what if he regards this conflict between the letter of his positive control 
orders.and the actual current desires of his superiors as having a xairly sign 
probability , at the monBnt he makes his decision? It seem3 to me that thus mxght 
put a strain on the literal obedience. of every pilot in the air; and xx there were 
200-li.OO pilots in the air, it is not hard to imagine that at least one . or more^ 
would resolve the strain by going ahead. At the very least, seme of them would 
come closer to it than they would in the earlier situation: whxch in xtself is 
^ possibility worthy of some attention® _ ^ 

Now, why would he ever put a fairly high probability on the possibijLXuv diat 
a go-ahead signal had been sent and had failed to get through? s i/nxes 

me that two conditions might contribute to that estimate: 

1) He had been allowed to get up to the positive control line without being called 
back® I have a hunch this is not typical training procedure, and that if there 
have been any real false alarms, the^ have not persisted this long 0 (rsiil vones, 
Dick Mills, ard Jay Wakeley have the impression that tnis is correct)® — so, 
then as soon as he gets much beyond the furthest point that he ever attained in 

a previous training alert of false alarm, his subjective procability 

that this is the "real thing," begin§ to go way up; it might or might not cecome 
"more likely than not." Say it hits 

2) Suppose that the information in E ldrsdg e 1 5 S—99„ has somehow tricklea through 
to him. Then the conditional probability that communications mxgnt break cown 
■given an SU attack could look like 100)o, or close to it. 

Under these two conditions (a prior training policy that, made tnis xlxgnt 
which, we assume, is in fact a ^a: false alarm—Issk seem "likely” to te^ uhe 
real thing; and pilot knowledge of S—99) 5 the probability that the * 2 . go- 

ahead order had really been sent (or should have been sent) but nad not be=n 
received could appear almost as high as the probability that there was really 
a war on: at that moment, almost 305o« Xt could be higher; but a lot of pilots 




sndai would be feeling the strain even at that level, 

would have received a briefing on his positive control orders. Did 
the intensity of that briefing really reflect the fact that he might be under 
this level of pressure ? Can any briefing, by itself, really ensure compliance 
under these conditions? 

This isn't the whole stoiy. Suppose that he does consider going ahead; 
presumably he will try to check the situation first. His orders in SACM f>©-8 
allow him—if he doesn't get a go-ahead signal, to ska check by UHF with the 
UHF ground station nearest to the positive control line,. But those ordersindicate 
that not all planes in the strike will be near enough to a UHF station (they men¬ 
tion that such planes must rely on the HF message from headquarters, coming back 
if they don't get a go-ahead). Such planes would probably try to communicate 

HF (even though they are supposed to keep HF silence). 
Now the question becomes interesting: ouf of ij.00 planes in the air. That are 
the chances that one or more would be out of communication at this moment 
for "natural” causes? (Some planes would have to be out on both UHF and HF; . 
some would merely have to be out on HF, not being close enough to a UHF ground 
station). 

Frang Eldridge and Bill Jones estimate this chance at def in itely greater 
than 0; gk y. r ra in fact, the expected number of planes that might try and fail 
to raise headquarters at this point looks greater than 1. These are the 
interesting cases. 

I haven't any detailed fixes to offer, if this is a problem, but three 
suggestions might at least indicate Xsetiss* the nature of the situation: 

a) It might be useful (though sxaHHSxxKxasd possibly dangerous) to run fully 
realistic combat alerts which allow the planes to go up to the positive control 
line,23id so that if a false alarm ever lets them get that far they won't 
assume that a war is almost certainly on. Of course, such an unannounced alert 
would have to take special precautions (e.g,, planes monitoring the positive control 
points, backup radio facilities) to make sure that the behavior suggested above 
didn't occur the very first time, 

b) Pilots might be "protected" from the information in S-99$ or, 

c) Briefings on the positive control orders might be repeated, much more emphatic¬ 
ally, frankly predicting the sort of pressures described above and reiterahgng, 

"We know what you’ll be thinking, but come back anyway." __ 

^Incidentally, X suspect that fc) without fa) would not be effective enough^ 

Bp) Suppose that one pilot (sone crew), decides tnat while it isn’t certain 
that the war is on, the chances are good enough to justify going ahead, (He 
has tried to reach headquarters on HF but failed; he isn’t near a UHF ground 
station). Or—to introduce a new possibility—suppose that he is one of Ikle’s 
madmen, Nov/, suppose that he w auld like to take few buddies with him: ty sending 
them an apparently authentic "go—ahead" signal. 

Whether or not these conditions seem likely* I find it. interesting that it 

appears he would able to do this , * . . . 

According to SACM 55^3, the alert pilot has in his plane tor on nxs 

person) an envelope which has a group of code numbers on the outside and another 
group on the inside. An authentic go-ahead signal consists of a message ■giving 
two groups of numbers, the first corresponding to the group on the outside, the 
second corresponding to the group on the inside. (After receiving a sxng signal 
giving the ggsx x g H numbers on the outside of his envelope, the pilot opens the^ 
envelope and checks the numbers on the inside; if they also match, he has received 
an authenticated signal). 
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Questions Are these two groups i>f numbers the same for al 1- alert planes 
in the air? Jones, M i ll s, Eldridge and Wakeley think that the answer is "Yes.™ 
Then, any pilot can open his envelope and learn the entire authenticated 
message* ' ~ 

He could broadcast this, over HF, and the whole alert force would assume 
itself to be hearing the go-ahead signal* This was my first' fantasy; the 
trouble with it is that headquarters would be monitoring HF, and they would 
know that someone was playing a joke* Much cleverer for him, then, to wait 
till he reached the positive control line and then broadcast over UHF to 
planes within hearing (his cell, say): "I just received a very faint signal, 
interrupted several-times, over HF; here it is.™ 

^/^"Note: according to-,Mills, alert planes are ordered to relay such orders 
isk by UHF to each other. v And, although they might check 2 the failure to 
/ receive a go-ahead signal with a ground station, it isn’t obvious that they 
/ would check up on 2 what appeared to be a perfectly clear directive® 

[/” (This in itself suggests the possibility that one plane might get the 

( order on HF when others failed to do so.) f our ^ 

' This ‘’problem" may be based only upon/lack of. information® If the possib ilit y 

does exist, it still seems to many people to be too bizarre to worry about* But 
if we are worried at all about the madman, case (and if we aight worry about the 
behavior I discussed earlier, which would not require a madman at all), we 
should be worried about the ability of a madman to carry a cell with him. 

Possible fixes: new procedures for checking instructions; back-up commun¬ 
ications £±h±sxssx (these possibilities merely make this more urgent); a "com¬ 
bination lock" for weapons; separate authentication for different planes (this 
may be infeasible because of time constraints; on the other hand, can’t 
there be parallel transmission on ±h different frequencies?). - 

ihreagk* Suppose that, as the alert planes are approaching the positive 
control line, a US ICBM goes over their heads issm towards Russia, either because: 
a) "premature discharge," all of the ICBMs having suddenly gone on, combat alert, 
or (-if- t h iyi (b) a "madman^" wh^-has chosen this plausible 
moment. ? i . \ 

Suppose that this ICBM is one of the 500 or so that^have had radio trans¬ 
mitters installed. If those transmitters have some canned messages in them, then 
the airborne pilots might hear this one chanting, "Follow me," on UHF. If they -' 
don’t have canned messages in them, the madman might have put this one in. If 
- neither of these occur, it still seems possible (to me, in my ignorance) that 
.this transmitter might be emitting some sort of signal, which might have the 
minimum significance to the listening pilots54^s±ximcc±hxxsshsxxxg3: "I am go-ing ^ 
Add this to the worries mentioned under (A), and you might get a- siren song, 

(Note: if there were s tsxb an "accidental discharge"—or if there were more than 
one—in the course of 2 what seemed to be a false alarm, SAC headquarters no doubt 
would be doing a good deal of soulsearching as to whether this didn't "compel" 
them to go ahead. Some pilots might even xsxuhx reason this out for themselves; 
but I doubt whether they should be encouraged tb do so. And the notion might even - 
tempt SAS a few SAC planners that a pilot who heard ICBMs talking overhead should 
follow them unless he received an order to return . Perhaps we should be prepared 
to deal with this argument.) 



